Wn��JX;����z.N���>�v�����O�J]�S��H/��s�-�L�U#)��$���F}�BST�Z���=��y�F�Y���>��r�e�2�/я�9xc���O^��}b�!8M���8Ck��{^/���j���ֆ% @��c���N��#:R�+����ţV<�c�c�j�Z�Z�-�6����,���l/W���F�10n��Q��h��Kވ&�ڐ��5����V&vX=�/M/�'���暛ZaA�4��{iZ%>����"w����( �E�+I[)�A�_[������g�G��Rf�e����n�.��Os^��j������v�Pq �'j�w;�V�£�b�.o�Uw� :���ly�a���u~�sϚ3'�Z_X�.���ً`ꟻ� ��ߊ�}��s��4�XR��X�J�C�+�K;��������������RŅy/mQe�>����ؽS��U��<��FdF�0_vo/iT#��`�2��|�j��J����Ξ��i�&�6)\�HW�~3�s���ݵGYa��B��P�d`�2o�lQ*J���� "�v�@Lf8���-�ןM�����펕��LL�G �F���]�_aغ��#�B.Wn����� Լ;��/C'� H"T��~�F3��o+j#�Q3�+Q�Z��FFPȏ�c�a�H�L����C���XB�L�53!��YݨL�F�2� GB��3�&��vj&���5�8�=�$Y(� ����Bn�{%O��Աjё�,���X���l��?�0o���%��UH�`���*o�܍���Ɉ]��dmi�m;�,c��D�&TR#�F���E2VPdN�j\�C�&/����ܽf}���q��&���x�������t����4� �=�KQ��c�!�;GZ{]�zIU�����i;H'3 ��� qR2�g�L�}�+G |�h xB]?�غ,�2�t,�x��sq�T&`�F6BBx�G@�S8!��33����A�n%����eo�q���:c��y�*��)�?1�v���� x���N�=i�������sҐu'f���]�ao3��w��s�KS|� �U 2��Nyr��Z�� Y����>Jjz+�� �L�^��=_X��e1����&��K��Y��;t����Ǽ����m�����-Y������p�>�搧��ϴ��2�w���C�4��U+]�O�u�c-k�IY����7-jf �8�U� �e��\7^���� ���#<5��>���-�աǧY�*�����@4��k���Q��Y� ;f�tpU���Ј%���Q6��2�IZ����ç#z9�L��XQ6ih8�!����?5��ݸ`:�)$��*��aPa��I��wA��������������j�9����?{�ȝ��}>��@@o��u�_/WLT�zt��D�y��R�]���?$;��v12.Ac����ѯjc��zid�7��o��>~����Cv%��E���$��Q��/��(^���f��3G_q�L-��v��o�@�`��i�㢍�S��]XǼ/� c�"9r}���\��)��jg����z�_5��5�;��M�*\����B*�.6ОE�� �yK��Ę`9�!�P����t�7�_д3i����&��Xз.G�"E:�rs���㰍aL��e 1�u��9猓f�n��������"�3��do� J��@��+�ٹs��u4�l�|�����v ��ZbG�>�K}�����;V��_E&L�l�+)���:�k��o��,t���I�2=>H��:�JJ+�X��K���AeDw= a��'x�Ȋ荋{�����f&��X���f���5J�Hм�̈F�m�V��<ۥ��bD]�b�;m^���(§(?V��ijʼ����?��������X���8R0k��� /��N��}}�-���G����T��uQ��iSA`�`��BS��%�XF n�����%�"�������|�b&���(�/�9� �]@�xB�4��U�j������v =��E����OD'����x�nQ�̃:���YHפ2]g6���dZ�}��,e�2X��Q ��߸��oe/����i ���������g��Y�p=Σ�����TY����ٔ��N��{G��3 �E��pB���뎳���&%ǔ�҃�a���DͰ�&��Q��ŵ�]�u�u3!���� �|$f��壸���ʮ�!i����+����D-�b~'bq�gn~z�"�Q�$�BPE���;~��O���ը�x,�{O/�K���a����XÆ�*w�PI=���`f:��Y���C�����l�鹍�N�$�����)����TS����A6��m�E/keZ���X�;�JNӀ�^�h�Vn�����bV��T��F7����p��u����N^�ɇ�i�ƅ�E�J�Y��V�Q7F�VJ`���v�qb��}"��r��+���( ��UtV*���\�k��0��̈��}/���:YU b����\L�7~� i'�p��of���ޞ���wlOCuoZ�ؒ��;W��kL��#��c���9^q���`� N^�i3�W ?�~��O�#j0P��sp�}�Z��eU�&\"�R���*e�j���������k!�?�O�"v�5��o����!����@v&���u�7B�pe�b�����i@�ٰB(:�z��QMQm����ʠZ�����g����N���G�Y{I�Z�t��V�6�DBq���i�}�����n�E�ɓ�����q��J^N�Zׯb�xu�oJ&:+����_�"��F�����!�D�Z�`V���0��rA3T��Y�K� -||� ��&��Un�-2M�5�wgvBWiۯ��m�Z��R����f2�1g�3�S��i/��,���6P2�)>�)����cAx���;#=�V�����D�$q�)c��6>�z۫e�I�0[� I���5���h��o)��9ڙg�|kG5&���b"9����v��ڱ���>��������3rb�����^V�4��ӂ��I����G�;�X�@�W��{4�"Zw3}#R&�j�=�)��ELϠr���^`�v.������=�ȃ��-������K�����8a�_r���J ��"�Kݰ��A���R��<�˞%�1KR��^>sG��� v�!$��Q3 ���[�]lH-!��_+&� ��$�W�D�:5|��T�i;�dі�U*ގ*��5���4����N��y6��� e,�!짟l��"�H�%�2f���m��\�����o�{J�U�MK���6#�<���<�����np�-xv��ǫ�"�sF�'�#�"$/�*.$��!>��oet��T�Z#[@\�A��J�C��1B�r�?��*<�GsE�q�hir+T�$i���k�>l*Ks/�yT�9H�U��w��%l%�\�e]�Rx2tH�1������UU�� ���qm �����_�`t��pq�H�B����n;�o�s���g>�䞛j�+�2XƝ/#;,�)���}�+��
Static task
static1
Behavioral task
behavioral1
Sample
bb9f66719da17a4063dc292967d53edcebb1e1bfa62a9a0eda1ff90af7cc98e6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bb9f66719da17a4063dc292967d53edcebb1e1bfa62a9a0eda1ff90af7cc98e6.exe
Resource
win10-20220812-en
General
-
Target
bb9f66719da17a4063dc292967d53edcebb1e1bfa62a9a0eda1ff90af7cc98e6
-
Size
2.7MB
-
MD5
0e0e6e0a99ad8c76d3c1f603f8728851
-
SHA1
06bf39371f22e5900fd6498e569424714533c212
-
SHA256
bb9f66719da17a4063dc292967d53edcebb1e1bfa62a9a0eda1ff90af7cc98e6
-
SHA512
9d2ec9bafd17e289e0618e8ab472f1fb6da6f6ac81f588d89a1ec708b2e2e5ce3ee6c37d052782940c0ab15bc9cc46919a017017a81cacae29455f054d78e27a
-
SSDEEP
49152:2HwVFCMDWWrV6XjadF1PHKr0Ry+Huc2e+GRbMIeeGjJLct5JAixwm:2Hwit9Gn1vKwM+O0+GRLvGjJLcTJA
Malware Config
Signatures
Files
-
bb9f66719da17a4063dc292967d53edcebb1e1bfa62a9a0eda1ff90af7cc98e6.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 31KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 9.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pwkz Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE